Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [malware]

Malware is any software application which subverts the will of the legitimate owner of a computer, by means of force or subterfuge, with or without personal or monetary gain on the part of the creator.

-2
votes
0answers
36 views

Does Roblox give viruses?

I have gotten viruses after downloading Roblox and playing it. Of course, I've always closed the things that pop up thinking it wasn't anything bad. Apparently, it was bad and I already got rid of it ...
-1
votes
0answers
21 views

can malware shut off a UPS/battery backup attached to the PC via USB

My not inexpensive ($200) UPS has been instantaneously cutting off recently for no apparent reason. It's like pulling the plug on the PC. There's no warning beep, no error messages on the LCD screen ...
0
votes
0answers
20 views

Hack attempt with the help of acunetix web vulnerability scanning [on hold]

Today our website went down because of the hacking attempt. After login, it is just showing the blank page. There is neither changes in the database nor any file is uploaded on the server. When I ...
7
votes
0answers
58 views

How can faulty version of an iOS app (such as WhatsApp) expose the whole device to crashes or take-over

There was a lot of recent, prominent news about a security vulnerability in WhatsApp that affects also iOS versions of the app. The volnerability has been described as carrying the risk of an attacker ...
0
votes
0answers
19 views

How to remove sterkly llc simple search platform? [on hold]

I'm running a MacOS machine and somehow this extension SimpleSearchPlatform keeps installing/enabling itself on my web browsers. All of them. The extension hijacks the browser and sets your homepage ...
1
vote
1answer
39 views

Malware Execution Delay

I am new to malware analysis and am currently using Cuckoo to understand some of the basics. I am trying to figure the time that the malware delays its initial executions. I found a functional call ...
2
votes
2answers
134 views

How would one scan a large, untrusted file?

I've recently started to convince relatives to upload anything they download to Virus Total, to help them be more safe when downloading stuff. However, I have recently come across an installer for a ...
-3
votes
0answers
59 views

Get Rid of OEM virus windows 7 [duplicate]

I've got a complex problem in which I know what the virus is, where it is, and cannot get rid of it. I was noticing slower than normal performance on my computer and more signs of a virus. I have ...
2
votes
1answer
65 views

Is it possible for a virus to be embedded in a image and can this image execute on Android Oreo by just opening the image?

I am aware that on Windows this is very much possible. But is it possible on Android (latest OS with all the security updates)? Can you install a virus/malware/spyware by just clicking on an image? ...
0
votes
0answers
28 views

Antivirus that doesn't collect statistics and any other data [on hold]

I'm searching for a good free Virus Removal Tool that doesn't collect statistics and any other data. It will be better it if will be opensource. I checked Dr.Web CureIt and Kaspersky Virus Removal ...
-4
votes
0answers
29 views

Have you given up on Android due to security issues? [closed]

Android at times seems like a bag with many leaks. Data leaks out by many paths, and external influences can change the phone all too easily e.g. drive-by attacks and downloads, no way to apply ...
0
votes
0answers
23 views

How to remove malware from entire shared hosting account

My shared hosting account was infiltrated and all files infected. Is there any way to disinfect the entire account?
3
votes
0answers
54 views

How to find malware added in supply chain to Android phone?

As has become a mainstream news story many times over, some Android phones are being shipped with malware preinstalled, because they go from factory to a second party who adds the malware and then to ...
2
votes
1answer
117 views

How does malware stay undetected for months?

For my college course, I am currently researching how malware works and stays undetected from antivirus and users. I built a proof of concept that stays hidden at scan time and run time. If a hacker ...
2
votes
2answers
220 views

Malwarebytes found bitcoin miners after I installed a new drive. Is my system screwed?

Recently I bought this external hard drive from Amazon ("Sold by: Amazon.com Services, Inc"). The first time I plug it into my computer, Malwarebytes shows this report (it found bitcoin miners in my ...
-2
votes
1answer
32 views

Penetration testing or Malware analysis?

My M.Sc research is about developing IDS for IOT. I'm confused about which field should learn more about; penetration testing or malware analysis. I have some knowledge about each one but for IDS, ...
0
votes
1answer
28 views

Ways to hide injected dll?

So if I inject my dll to a pprocess (or all running processes, including AVs) and it hooks some functions, why can't I just simply hook the functions (WinAPI functions) that could detect my injection ...
-1
votes
1answer
115 views
+50

What makes a VPN safe for an organization when connecting BYOD infected machine?

Several malware types have the capability to move laterally within the company infrastructure, infecting connected machines within the company. I was wondering how it's possible for an infected ...
0
votes
2answers
50 views

On urlscan.io Indicators of Compromise, what do the hashes represent?

When I look up a domain of interest on urlscan.io, I see a lot of interesting information. When I click on "Indicators of compromise" (IOC), I see a list of hashes that are actually links to pages ...
1
vote
1answer
133 views

Antivirus warns about processes trying to access my webcam

For the last two weeks I am constantly getting notifications from my antivirus about attempts of using my webcam. I have always chosen "Block access", often after checking "remember for this ...
0
votes
0answers
48 views

Flash drive rootkit [closed]

I have reason to believe rootkit was transferred to my machine via a flash drive I tried several antivrus and they don't detect it, any suggestions on how to detect it?
-1
votes
1answer
52 views

decompile a DLL which is not .NET

I ran over a suspicious DLL file which originally was created by Adobe Photoshop (The license looks legit). I want to check if DLL contains malicious code which would be executed at runtime. What I ...
4
votes
3answers
253 views

Is hijacking a webcam after visiting a website a plausible threat?

(I made a throwaway to ask this question, since this situation is pretty embarrassing) Earlier today I started receiving emails threatening to send embarrassing video of me to all my contacts unless ...
-1
votes
0answers
44 views

Digitalocean Droplet got compromised - is it possible to decode the program?

My VPS got compromised and was used for DDOS attacks. I found the program that was responsible for it, opened it up in nano and looked like this: Is it possible to decode it somehow, see the source? ...
6
votes
3answers
304 views

Is com.com a Google web site?

With the new Chrome update, I started getting a message at the top of Chrome: When I clicked on Learn More, it took me to Com.com web site. A warning appeared before that "your connection is not ...
0
votes
2answers
172 views

Is this a safe way to open a PDF file? [duplicate]

I have recieved an email with a pdf file whose content I want, but I'm not exactly sure what the source of it is. In gmail, I have two options: "Download" and "Save to Drive". I'm assuming it means ...
0
votes
1answer
96 views

Fake bank text message

I recently tried to use my card to buy something on my phone for £29.99. My card was declined so I used a different card and the payment went through. A couple minutes later I get a message from a ...
8
votes
6answers
374 views

What are the techniques to detect malware call home/beaconing activities?

It is very common for active malware to "call home" (or beaconing), either to fetch updates and instructions or to send back stolen information.. In an internal network where web access to the ...
2
votes
1answer
92 views

Type of malware on adult sites

What kind of malware is there on random adults site? When I open a video in such a sites there is weird effect of opening another window of browser which is immiedetely closed or opening another tab ...
0
votes
0answers
44 views

Malware makes fake USB device [duplicate]

I am running windows 10 on a X1 carbon. I think I picked up a malware while I was visiting a website. Here are symptoms I had been observing: When I opened the web site, I saw that there is usb ...
-1
votes
0answers
22 views

How to open infected files safely with Firejail

Basically i watch movies that could contain threats, is there a safe way to open these, as firejail does have access to certain white listed files. https://firejail.wordpress.com/ There are ways to ...
0
votes
1answer
67 views

security leak in working with hardware write blockers?

If a hard disk drive that contains malware, is connected to a hardware write blocker, that works on the lowest level, can this malware copy itself ,spread on the hardware write blocker or even on the ...
0
votes
0answers
20 views

.PSD file in chrome extension, unable to decode most of it (screenshots)

I sometimes find Chrome extensions that I like. I will pour through their GitHub repos and all the js/html files etc. look clean. Good reviews etc.. But then I will see a .psd file as an icon mixed in ...
2
votes
0answers
45 views

My server is compromised through apache - help! [duplicate]

As mentioned previously, I cannot physically remove the server from the internet as I do not have physical access. So, very little information in the ticket marked duplicate is relevant. I am going ...
2
votes
1answer
89 views

White screen popped up. All of sudden not able to do anything. Scam or something else?

I have been using this laptop for the last 6 months and never had any issue, but last Friday I was watching a movie and then all of sudden my PC restarted and a white screen (see figure below) showed ...
-1
votes
1answer
51 views

How to stop wordpress attack with bot? [duplicate]

Here are some files that hackers modified. Inside my WordPress installation, I found an unknown folder called ID3 inside of a folder called ID3. three files 1.bots.php this is bots.php code GNU ...
3
votes
2answers
70 views

How to find what files in a zip are malware using Virustotal

I have a malware infected android phone and I am suspicious that some of the binaries in system/bin/ and system/xbin/ are malware so I decided to dump the system and zipped the contents of bin and ...
0
votes
0answers
56 views

“Malware” has been posting this to another server. Any idea what encoding this is? [duplicate]

I came across a site that is sending data like these to a remote server via javascript: ...
0
votes
0answers
14 views

Can't fix All-Radio 4.27 Malware because the computer is freezing/unusable [duplicate]

Yesterday the program All-Radio 4.27 Portable started running automatically whenever I open my PC. I researched how to remove since it came out of nowhere and bothered me. Then I found out that it ...
0
votes
1answer
77 views

Unexplained DNS connections on boot

I was on an Ubuntu VPS today, with a bind9 DNS server (without DNSSEC configured) installed and running. Immediately after booting the machine I ran: netstat -tanp And received this output: Proto ...
6
votes
3answers
238 views

What is the (literally) lightest way to run a second secure system?

My goal is to have two separate systems where one is secure even if the second one is full of malware. My current approach is to have two separate laptops and the only way these two communicate with ...
0
votes
1answer
69 views

Suspicious Redirect to malicious website

While using a 3rd party platform my company is working with (e.g. platform.com) the following issue appeared. I clicked on a button in order to locally download an excel sheet (report) that was ...
7
votes
4answers
480 views

Freaked out by “impossible click” in logs

I was staging an isolated production environment and accessing it's remote PHP script from my local mac on http://example.com/XbAM7Kt7SJj3M8ytJfEQZbwcBLzg0gNWGfyCHL2b0f0 I saw my click in the log as ...
1
vote
3answers
145 views

How to inspect an email attachment without downloading it?

I accidentally opened a PDF email attachment on an Android phone as I was trying to figure out if the email was fraud or a scam. It was an email claiming I booked a flight and the pdf had my e-tickets....
2
votes
1answer
88 views

Information on the specifics of how behavioral antiviruses work?

I'm looking into security software and it seems like the Next Big Thing is behavioral antivirus. I'd like to try possibly making my own rinky-dink "next-gen behavioral AV" so I can gain a better ...
1
vote
3answers
86 views

Extracting features from PE files. Machine learning and malware

Are the features which can be extracted from a PE file (some information from headers, section names, strings, import, export sections etc) enough to use them to train particular machine learning ...
0
votes
2answers
109 views

Malware on read only device/memory

Putting Programs/OS/Files (contain malware) on USB-Stick (USB-stick can do read/write). Let's say this USB stick, after i put Programs/OS/Files on it, is now just theoretically, read-only. I myself ...
1
vote
0answers
38 views

Are there any malware for USB-connected printers

At work, we have a printer/scanner that connects only to USB. As far as I know, no one who uses it has a print server on their computers so I'm not sure it's accessible over the internet. Because most ...
1
vote
3answers
41 views

Read Write Execute on infected thumb drives

There is some debate going on among my peers. With differing opinions regarding risk on infected thumb drive with limiting policies set on it. Question is Can you still get an infection with read ...
2
votes
1answer
93 views

opening infected files on Linux and Raspberry Pi

Considering Linux's reputation for being somewhat immune to infections, and the fact that most malware are written with Windows as a target, is it safe to open possibly infected files on a Linux ...